Privacy policy

DRAFT – have it reviewed legally before publishing. As of October 2026.

1. Controller

Len Kaufmann, Mühlgasse 8, 64405 Fischbachtal, Germany, email: hello@ascndly.app.

The website www.ascndly.app and its waitlist have their own privacy policy.

2. Principle

ASCEND works entirely on your device, also without an account. Your training data are stored encrypted on the device. Data leave the device only if you create an account or explicitly switch on a feature that needs it. What goes where is described below.

3. Data on your device

4. Account and sync (Supabase)

With an account, your raw data are synced with our server so they are backed up and available on your other devices. The provider is Supabase Inc.; the database is located in the EU (Stockholm region, Sweden). We store your email address for sign-in and the data listed in section 3 except photos and computed values. The sign-in code is emailed to you by Resend (Plus Five Five, Inc., USA) through servers in the EU (Ireland); Resend also stores sending data (address, time, delivery status) in the USA and is certified under the EU-US Data Privacy Framework.

The legal basis is the performance of the contract for using the app (Art. 6(1)(b) GDPR); for health data, your explicit consent (Art. 9(2)(a) GDPR, see section 5).

5. Health data

Values such as heart rate variability (HRV), resting heart rate, sleep and WHOOP recovery are health data within the meaning of Art. 9 GDPR. ASCEND processes them only with your explicit consent, given for each category separately. They are used only to adapt the readiness and the training prescriptions to your recovery.

[To be clarified before publication: what you enter yourself – the check-in (sleep, soreness, stress), body values and pain reports – is stored today without this consent, as part of the training log (section 4). Whether that needs explicit consent under Art. 9 GDPR is a legal question; if so, the app needs a consent of its own for it.]

6. AI coach (Anthropic)

If you switch on the AI coach, ASCEND sends the results of the engines to our server and from there to Anthropic PBC (USA), which words the explanation. Only results are transmitted: labelled values, reasons and the confidence. No single sets, no raw wearable data, no name, no email address.

7. Usage statistics and error reports (PostHog)

Only if you consent, ASCEND sends usage events to PostHog (servers in the EU). They are linked to a random identifier of this installation, not to your account or your email address. Examples: an onboarding step was completed, a session was started, an explanation was opened. The events contain no names, no email address, no health values and no weights. For technical reasons PostHog sees the IP address of your device when events are sent. [To be clarified before publishing: have the PostHog project discard IP addresses and say so here.]

With the same consent, ASCEND sends error reports when the app hits an unexpected error: the kind of error, the place in the program code, the app version and the device type. The error text is removed first because it could contain your input.

You are asked in two places: at the preview of your first plan and, if you did not choose there, once after your first session finished in ASCEND (imported sessions do not count). Both answers are equal, neither is preselected, and nothing in the app depends on either. If you choose "Don't share" you are not asked again; you can change the answer at any time under Profile → Legal & consents.

PostHog is not started before your consent. After a withdrawal, no events or error reports are sent, and the identifier of the installation is deleted. The legal basis is your consent (Art. 6(1)(a) GDPR).

8. Food search (Open Food Facts)

If you search for a food or scan a barcode, the request goes to our server and from there, if needed, to Open Food Facts. Only the search term or barcode is transmitted, never your entries. Available with an account only.

9. Purchases and subscription (RevenueCat, Google Play, App Store, Stripe)

If you buy ASCEND Pro, you pay through Google Play or the App Store. Payment data such as your card or account are seen only by the store; ASCEND never receives them.

So the app knows whether Pro is active, we use RevenueCat Inc. (USA). RevenueCat receives the receipt from the store (product, price, currency, purchase, renewal and expiry dates, trial, cancellation) and an identifier from the app: without an account a random identifier of this installation, with an account the identifier of your ASCEND account, so Pro also applies on your other devices – never your email address, no training or health data. For technical reasons it also sees the IP address, device model, operating system, app version and store country. RevenueCat is only contacted when the app is connected to the store.

Where a version of the app sells Pro through Stripe instead of the store, you pay on a page of Stripe Payments Europe, Ltd. (Ireland) in your browser. This needs an ASCEND account: we create a customer at Stripe with your email address and your account identifier. You enter card or account details only at Stripe; ASCEND never sees them. Stripe also receives your billing address (if you enter it), IP address and browser details and uses them for fraud prevention too. On our server we store the Stripe customer identifier, the status of your subscription, the plan, the trial and the end of the period – so the app and the AI coach know whether Pro is active. You cancel, change the payment method and see invoices in Stripe's customer portal ("Manage subscription"). If you delete your account, we also delete the customer at Stripe, which ends a running subscription at once. Stripe and we keep invoice and booking records as long as tax and commercial law require. Stripe also processes data in the USA; the transfer relies on [Clarify before publishing: EU-US Data Privacy Framework or Stripe's standard contractual clauses].

With an account we also store on our server whether your account has Pro: product, expiry date and when we last asked RevenueCat. The server uses it to check whether the AI coach may answer you. If you delete your account, this is deleted and we ask RevenueCat to delete your customer record. You cancel a running subscription in the store; deleting the account does not cancel it.

The legal basis is the performance of the purchase contract (Art. 6(1)(b) GDPR). We keep purchase data while the subscription lasts and as long as statutory retention requires. RevenueCat processes data in the USA; the transfer relies on [To be clarified before publishing: EU-US Data Privacy Framework or RevenueCat's standard contractual clauses].

10. Retention

Your data are stored until you delete them or your account.

11. Permissions on your device

ASCEND asks only when you use the feature:

12. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consents at any time with effect for the future: in the app under Profile → Legal & consents.

13. Recipients

Data processing agreements are concluded with the providers where required.